Management of Journal Entries Associated with Customizations of Knowledge Objects in a Search Head Cluster

4. The method of claim 1, wherein the first customization comprises a customization of at least one of a late-binding schema, a saved search, an event type, a transaction, a tag, a field extraction, a field transform, a lookup, a workflow action, a search command, or a view.

5. The method of claim 1, wherein the first customization comprises at least one of a change, update, creation, modification, sharing, permissioning, or deletion relating to the knowledge object.

6. The method of claim 1, wherein the plurality of search heads each comprise a client interface configured to receive one or more customizations from one or more client computing devices.

7. The method of claim 1, wherein the plurality of search heads each comprise a client interface configured to process one or more customizations shared by the plurality of search heads of the cluster.

10. The method of claim 1, further comprising writing, by the search head leader, a configuration setting corresponding to the first customization to a configuration file.

11. The method of claim 1, further comprising performing a map-reduce search of source data in accordance with the first customization.

12. The method of claim 11, wherein performing the map-reduce search comprises applying a late binding schema to the source data, the late binding schema associated with one or more extraction rules defining one or more fields in the source data.

13. The method of claim 11, wherein the source data comprises at least one of aggregated heterogeneous data generated by at least one of a server, a database, an application, or a network, raw machine data, or a plurality of timestamped events, each timestamped event including a portion of raw machine data.

14. The method of claim 1, wherein the search head leader is configured to synchronize one or more customizations across the plurality of search heads in the cluster.

16. The system of claim 15, the processing device to execute the instructions to update a configuration file stored in a local data store of the search head leader to include the first journal entry.

17. The system of claim 16, the processing device to execute the instructions to write a configuration setting corresponding to the first customization to the configuration file.

18. The system of claim 15, wherein the search head leader is configured to synchronize one or more customizations of one or more knowledge objects across the plurality of search heads in the cluster.

20. The non-transitory computer-readable medium of claim 19, the operations further comprising writing a configuration setting corresponding to the first customization to a configuration file.